Linux帳號密碼到期會導致crontab作業不能執行，linuxcrontab

Linux帳號密碼到期會導致crontab作業不能執行，linuxcrontab

今天一同事報告Linux伺服器上的crontab作業沒有運行，檢查/var/log/cron日誌後發現下面錯誤資訊

Jan 19 16:30:01 xxxx crond[31399]: Authentication token is no longer valid; new one required

Jan 19 16:30:01 xxxx crond[31400]: Authentication token is no longer valid; new one required

Jan 19 16:30:01 xxxx crond[31401]: Authentication token is no longer valid; new one required

Jan 19 16:30:01 xxxx crond[31398]: Authentication token is no longer valid; new one required

Jan 19 16:30:01 xxxx crond[31400]: CRON (oracle) ERROR: failed to open PAM security session: Success

Jan 19 16:30:01 xxxx crond[31400]: CRON (oracle) ERROR: cannot set security context

Jan 19 16:30:01 xxxx crond[31401]: CRON (oracle) ERROR: failed to open PAM security session: Success

Jan 19 16:30:01 xxxx crond[31401]: CRON (oracle) ERROR: cannot set security context

Jan 19 16:30:01 xxxx crond[31402]: Authentication token is no longer valid; new one required

Jan 19 16:30:01 xxxx crond[31398]: CRON (root) ERROR: failed to open PAM security session: Success

Jan 19 16:30:01 xxxx crond[31399]: CRON (oracle) ERROR: failed to open PAM security session: Success

Jan 19 16:30:01 xxxx crond[31402]: CRON (oracle) ERROR: failed to open PAM security session: Success

Jan 19 16:30:01 xxxx crond[31398]: CRON (root) ERROR: cannot set security context

Jan 19 16:30:01 xxxx crond[31399]: CRON (oracle) ERROR: cannot set security context

Jan 19 16:30:01 xxxx crond[31402]: CRON (oracle) ERROR: cannot set security context

Jan 19 16:35:01 xxxx crond[31431]: Authentication token is no longer valid; new one required

Jan 19 16:35:01 xxxx crond[31431]: CRON (oracle) ERROR: failed to open PAM security session: Success

Jan 19 16:35:01 xxxx crond[31431]: CRON (oracle) ERROR: cannot set security context

恰好出現問題前，我在這台伺服器上用chage命令設定了root、oracle等帳號的密碼到期策略。導致該帳號oracle密碼到期（Password expires），所以出現"Authentication token is no longer valid; new one required"等這類錯誤資訊。

解決方案：

1：用SecureCRT以oracle使用者登入系統，修改帳號密碼後，這個許可權認證問題立馬解決。

2：使用chage命令讓對應帳號密碼永不到期。當然一般不建議使用該策略解決問題。